Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
File: 2nVBcltyi1qJ87-vIPh2VWPC8_s.mft (raw, json)
Hash identifier: I7SLI4sBIrFzu1Mtzqkyh15LUe75KoFyiokVxqcxl1Q=
Subject key identifier: 43:D7:7B:05:25:C2:56:45:BB:BB:D9:34:A5:D4:F8:1F:FB:00:B0:F6
Authority key identifier: DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
Certificate issuer: /CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Certificate serial: 01A00101D3D9F8101057079EBB31937DA0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
Manifest number: 19FC
Signing time: Fri 14 Aug 2026 16:01:31 +0000
Manifest this update: Fri 14 Aug 2026 16:01:31 +0000
Manifest next update: Sat 15 Aug 2026 16:01:31 +0000
Files and hashes: 1: 2nVBcltyi1qJ87-vIPh2VWPC8_s.crl (hash: 1xsb0efi0XheSNYb2POCAesUPfBBxJLpu+xPhjwBc34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:d3:d9:f8:10:10:57:07:9e:bb:31:93:7d:a0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Validity
Not Before: Aug 14 16:01:31 2026 GMT
Not After : Aug 15 16:01:31 2026 GMT
Subject: CN=43d77b0525c25645bbbbd934a5d4f81ffb00b0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bc:01:fe:0a:39:61:56:4f:ce:3f:b5:72:5e:
75:66:34:15:1d:c8:5d:77:ce:13:39:19:1c:f6:04:
99:0f:a2:b6:d8:47:3b:fd:49:02:16:b3:2f:e9:f5:
78:18:74:80:23:59:f5:bb:f7:cb:be:5e:10:2f:07:
18:c9:ae:48:fc:9b:9c:af:c1:49:a3:ac:e5:c6:8e:
c4:85:ca:6f:f8:a8:3b:71:b2:6e:e8:f8:62:8e:5e:
23:11:af:90:d0:aa:b2:36:7e:9c:0b:90:d5:ec:93:
fd:15:6a:49:e6:0e:d5:ed:23:f6:d7:c0:d4:65:1c:
c9:2c:88:aa:a6:ab:1d:aa:b1:1e:6b:32:75:59:63:
18:c4:8f:10:ef:d0:11:f2:79:b6:2d:e3:68:5a:bf:
5f:20:29:0d:98:3a:1b:31:42:34:b2:25:92:12:51:
b9:81:e7:32:46:90:78:30:a9:5e:b9:0f:08:c1:23:
4b:cd:ef:f1:af:d4:9c:52:ac:bd:28:89:25:5d:1d:
84:0c:8a:8a:2b:f3:f5:40:c4:5e:b3:60:6f:e2:a5:
ce:f4:51:c7:05:43:56:99:52:98:4a:a1:09:2a:4f:
82:a2:66:b1:89:3f:79:f9:64:3b:ff:fe:6e:73:ad:
13:48:58:b8:71:4c:69:2c:d9:1f:e1:02:35:78:13:
5e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D7:7B:05:25:C2:56:45:BB:BB:D9:34:A5:D4:F8:1F:FB:00:B0:F6
X509v3 Authority Key Identifier:
keyid:DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1a:c0:43:aa:4b:e1:8c:e7:0f:27:fe:48:68:3d:57:d0:5e:
ed:bf:6a:7d:f0:41:75:6d:6f:3e:21:67:a3:07:ac:d9:8e:f3:
c3:d8:12:9d:1d:e9:04:d9:20:06:64:c6:af:51:bd:f7:50:e3:
95:9c:36:64:2b:7a:4e:dd:9e:a5:55:88:13:ca:f7:b5:4a:5b:
65:7c:a8:8d:c4:74:2b:d8:d1:57:85:48:d9:0c:bc:05:82:42:
53:67:44:8c:f5:a7:c2:59:6c:e5:22:bf:ae:8e:32:6d:a0:f0:
19:40:d5:88:41:37:88:3e:70:52:d7:ec:62:9a:47:fb:84:12:
c3:d5:7f:1b:69:72:16:b7:44:2d:7e:4e:6c:50:75:ed:c4:f8:
15:7a:31:93:8b:09:fa:20:69:1a:35:cb:ac:59:eb:d2:3d:11:
37:18:cb:1c:f8:31:f9:19:66:94:b0:2e:18:b1:e4:49:43:d1:
b4:b6:d8:82:29:e8:95:f2:4e:4b:09:bf:9b:4f:a1:32:80:b4:
eb:08:c6:8a:57:d5:bf:ad:7e:01:73:1b:06:87:a0:35:36:2d:
0f:09:02:48:d6:ee:bc:20:2d:42:68:07:87:9d:6a:c8:c1:65:
b1:d8:22:13:24:34:68:e3:b9:7f:ea:b9:6c:0f:3f:53:cc:ce:
c7:68:54:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:56 2026 by rpki-client